Stripe Service Providers (Sub-Processors)

This document is Stripe's Sub-processor and Affiliate Disclosure List, last updated December 20, 2025, published pursuant to GDPR and other global privacy frameworks that require data processors to maintain and disclose sub-processor arrangements when processing personal data on behalf of business customers. The document states that Business Users may object in writing to the appointment of a new sub-processor within 30 days of a page update, and that failure to object within this window is deemed acceptance under the terms of Stripe's Data Processing Agreement. The document discloses a materially expanded affiliate network including newly added entities in the stablecoin and crypto space (Horkos, Inc., Bridge Ventures, LLC, Bridge Building Sp. Z.o.o., Bridge Building S.A., and Stripe Global Technology, LLC), a newly designated EMEA and APAC data controller (Stripe Technology Company Limited), and the conversion of Stripe, Inc. to Stripe, LLC effective January 3, 2026, each of which may trigger data mapping, DPA review, and regulatory notification obligations for affected Business Users. The document engages GDPR sub-processor notification requirements, India's data localization regulations (referenced for Stripe India Private Limited), and financial services regulatory frameworks in Ireland (Central Bank of Ireland), the UK (FCA), and multiple APAC and LATAM jurisdictions. Compliance teams in the EU, UK, and other jurisdictions with formal DPA structures should evaluate whether the newly listed entities, particularly those handling stablecoin and crypto-related personal data, fall within the scope of existing contractual sub-processor consent mechanisms and require updated data transfer impact assessments.